Lucene search
+L

35 matches found

attackerkb
attackerkb
•added 2026/05/27 9:49 a.m.•21 views

CVE-2026-42738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.8AI score0.00152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•33 views

PT-2026-43650

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.8AI score0.00152EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•8 views

CVE-2026-42738: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.8AI score0.00152EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•7 views

CVE-2026-42745: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.3CVSS5.8AI score0.00238EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•13 views

CVE-2026-42746: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.3CVSS5.8AI score0.00195EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/16 7:22 p.m.•18 views

CVE-2025-15635

Cross-Site Request Forgery CSRF vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

4.3CVSS5.8AI score0.00107EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/15 5:17 p.m.•29 views

CVE-2025-15635

Cross-Site Request Forgery CSRF vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

4.3CVSS0.00107EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/15 3:49 p.m.•8 views

CVE-2025-15635

Cross-Site Request Forgery CSRF vulnerability in Zaytech Smart Online Order for Clover allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through 1.6.0...

4.3CVSS5.8AI score0.00107EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•31 views

PT-2026-33079

Name of the Vulnerable Software and Affected Versions Smart Online Order for Clover versions n/a through 1.6.0 Description A Cross-Site Request Forgery CSRF flaw allows an attacker to induce a user to perform actions they did not intend to do. Recommendations At the moment, there is no informatio...

4.3CVSS5.2AI score0.00107EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/15 12:00 a.m.•7 views

CVE-2025-15635: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

4.3CVSS5.8AI score0.00107EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2024-26154

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:49 a.m.•30 views

CVE-2024-43253

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

9.8CVSS5.8AI score0.00617EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:00 a.m.•29 views

CVE-2024-29115

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...

6.5CVSS8.5AI score0.00337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:40 a.m.•20 views

CVE-2024-31238

Cross-Site Request Forgery CSRF vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...

8.8CVSS8.5AI score0.00221EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/01 3:15 p.m.•18 views

CVE-2024-43253

Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Online Order for Clover: from n/a through 1.5.6...

9.8CVSS5.8AI score0.00617EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/01 3:15 p.m.•24 views

CVE-2024-43254

Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Online Order for Clover: from n/a through 1.5.6...

8.8CVSS6AI score0.00423EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•41 views

CVE-2024-43253

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

9.8CVSS0.00617EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•39 views

CVE-2024-43254

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

8.8CVSS0.00423EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:17 p.m.•67 views

CVE-2024-43253

CVE-2024-43253 describes a Missing Authorization vulnerability in the WordPress plugin “Smart Online Order” for Clover (Zaytech). The issue allows accessing functionality not properly constrained by ACLs. Affected range: Clover Online Orders from n/a through 1.5.6. Public references indicate a hi...

9.8CVSS5.8AI score0.00617EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/11/01 2:17 p.m.•82 views

CVE-2024-43254

CVE-2024-43254 affects the WordPress plugin Clover Online Orders (Smart Online Order for Clover). The connected docs identify a Missing Authorization issue due to misconfigured access control in Smart Online Order for Clover up to version 1.5.6. The Wordfence/CVE entries note the vulnerability as...

8.8CVSS5.8AI score0.00423EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder